$ rpki-client -vvf repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.mft File: E7D91E7B841DB274E77E823084312F8B78A5C951.mft (raw, json) Hash identifier: 95C/Lw15YN4ZeO57DJyXb4siBdaFxvGU5WYLC5M015Q= Subject key identifier: 48:36:6D:68:9A:45:A8:E7:35:1B:EA:1E:9F:0C:97:36:4D:C5:61:68 Authority key identifier: E7:D9:1E:7B:84:1D:B2:74:E7:7E:82:30:84:31:2F:8B:78:A5:C9:51 Certificate issuer: /CN=E7D91E7B841DB274E77E823084312F8B78A5C951 Certificate serial: 7959EC8248836B67ECF28E37A8A1FEF88693F8D7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7D91E7B841DB274E77E823084312F8B78A5C951.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.mft Manifest number: 04B5 Signing time: Mon 21 Jul 2025 20:31:41 +0000 Manifest this update: Mon 21 Jul 2025 20:26:41 +0000 Manifest next update: Thu 24 Jul 2025 21:23:41 +0000 Files and hashes: 1: 323030313a6466313a316338303a3a2f34382d3438203d3e20313339333637.roa (hash: FFu9qqO0bSps/kj6fyv5I//5Hd+4wId09goi1uFGoE8=) 2: 3130332e3134312e3233382e302f32332d3234203d3e20313339333637.roa (hash: Q8AiVS513YZaJstY9RUzjxicepMe2vYlP+usoxO41hE=) 3: E7D91E7B841DB274E77E823084312F8B78A5C951.crl (hash: LILORVM3xOvtD52mDw0I8r/8l8MSlpQiOiJsydscvtU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.crl rsync://repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7D91E7B841DB274E77E823084312F8B78A5C951.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 21:23:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:59:ec:82:48:83:6b:67:ec:f2:8e:37:a8:a1:fe:f8:86:93:f8:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E7D91E7B841DB274E77E823084312F8B78A5C951 Validity Not Before: Jul 21 20:26:41 2025 GMT Not After : Jul 24 21:23:41 2025 GMT Subject: CN=48366D689A45A8E7351BEA1E9F0C97364DC56168 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e4:36:3c:a0:04:f7:32:90:a2:bf:c4:8b:5b: 48:68:74:ec:26:63:3b:cd:a7:28:b0:01:4a:0a:6a: 20:87:ca:52:17:4a:c5:ad:21:01:5d:3e:56:46:15: c3:6f:8c:f5:47:c0:3d:af:ff:cc:fa:72:22:a8:57: 9c:18:04:a1:94:0d:fa:cd:f3:23:77:78:9f:56:7a: 13:92:d7:28:0d:87:73:d7:0b:b9:b2:8f:ab:ca:81: 57:82:77:a5:48:00:9c:b4:df:7c:17:bb:b9:3b:fd: cf:19:ce:ec:a6:f3:7c:9f:c8:f4:36:23:ba:fd:6d: 6b:f1:9f:ea:f5:62:fa:fb:79:be:cd:c6:d8:f0:0b: d0:80:91:0c:f5:2b:c0:b9:26:74:7b:c6:bd:00:65: 46:b2:09:59:ca:a4:f2:73:25:32:f4:48:7a:ad:49: c6:2d:1a:c6:89:f9:bf:be:46:4e:25:3b:70:38:13: 56:42:24:d9:16:50:33:4d:00:2e:12:fc:8e:05:b7: aa:98:ca:dd:42:f3:b2:cb:d6:c3:2c:1e:5f:36:86: a9:ae:e5:7e:ed:b5:20:e8:52:ff:b9:ae:9b:bc:3d: c9:99:78:19:f4:c6:12:41:e7:f1:09:97:db:d9:1e: 76:c9:61:54:7b:d5:ed:0b:4b:80:36:c5:21:1c:50: c0:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:36:6D:68:9A:45:A8:E7:35:1B:EA:1E:9F:0C:97:36:4D:C5:61:68 X509v3 Authority Key Identifier: keyid:E7:D9:1E:7B:84:1D:B2:74:E7:7E:82:30:84:31:2F:8B:78:A5:C9:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7D91E7B841DB274E77E823084312F8B78A5C951.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:73:ac:81:eb:66:65:91:e1:a4:cd:0a:90:e6:8d:d0:c9:1e: 66:45:2d:b4:c6:04:54:7a:05:ba:9d:49:df:ac:df:8d:2f:61: fb:e8:2c:22:71:91:12:37:70:82:74:2c:fa:f8:f5:f5:d2:f5: 16:cb:cd:5a:fb:8c:75:6a:28:e6:5b:81:23:78:99:a5:19:bf: 6d:fc:10:f8:2d:e7:95:5f:65:ef:b9:4d:15:69:3c:45:be:bf: 14:93:aa:fd:ad:10:55:a2:80:ce:8c:a1:db:3e:f6:f9:2a:6b: 3d:2f:8b:11:cb:e1:62:39:ea:0f:8f:43:09:48:93:8e:8b:7d: ad:b0:a3:83:6f:94:b6:a7:7d:e1:13:3f:56:f1:33:d8:c7:d4: aa:8c:b7:f7:94:fe:23:13:3a:5c:4b:df:9d:49:d0:73:f2:f2: 3f:e9:7f:6b:3e:e5:1b:68:77:07:19:00:01:62:66:5c:d9:eb: 4b:c4:e2:30:c0:05:fc:33:08:d3:58:16:9c:4b:8e:b0:18:f7: 9f:d4:8f:59:35:1d:98:a0:69:67:c9:fe:d3:cb:3d:0a:b7:12: e3:25:c7:43:e8:00:26:ed:ef:b7:17:de:70:9c:4a:01:71:99: 37:5a:4c:c2:e9:b2:d9:ea:f3:a4:f6:40:2e:39:98:55:a6:83: 7e:ac:21:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeVnsgkiDa2fs8o43qKH++IaT+NcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTdEOTFFN0I4NDFEQjI3NEU3N0U4MjMwODQzMTJGOEI3 OEE1Qzk1MTAeFw0yNTA3MjEyMDI2NDFaFw0yNTA3MjQyMTIzNDFaMDMxMTAvBgNV BAMTKDQ4MzY2RDY4OUE0NUE4RTczNTFCRUExRTlGMEM5NzM2NERDNTYxNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL5DY8oAT3MpCiv8SLW0hodOwm YzvNpyiwAUoKaiCHylIXSsWtIQFdPlZGFcNvjPVHwD2v/8z6ciKoV5wYBKGUDfrN 8yN3eJ9WehOS1ygNh3PXC7myj6vKgVeCd6VIAJy033wXu7k7/c8Zzuym83yfyPQ2 I7r9bWvxn+r1Yvr7eb7NxtjwC9CAkQz1K8C5JnR7xr0AZUayCVnKpPJzJTL0SHqt ScYtGsaJ+b++Rk4lO3A4E1ZCJNkWUDNNAC4S/I4Ft6qYyt1C87LL1sMsHl82hqmu 5X7ttSDoUv+5rpu8PcmZeBn0xhJB5/EJl9vZHnbJYVR71e0LS4A2xSEcUMANAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSDZtaJpFqOc1G+oenwyXNk3FYWgwHwYDVR0j BBgwFoAU59kee4QdsnTnfoIwhDEvi3ilyVEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTcwODNhYi0yNzBhLTRiMGEtOGU1NS1hNDVlMWNmMWFmZDUvMC9FN0Q5MUU3Qjg0 MURCMjc0RTc3RTgyMzA4NDMxMkY4Qjc4QTVDOTUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTdEOTFFN0I4NDFEQjI3NEU3N0U4MjMwODQzMTJGOEI3OEE1 Qzk1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGE3MDgzYWItMjcwYS00YjBhLThl NTUtYTQ1ZTFjZjFhZmQ1LzAvRTdEOTFFN0I4NDFEQjI3NEU3N0U4MjMwODQzMTJG OEI3OEE1Qzk1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABdzrIHrZmWR4aTNCpDmjdDJHmZFLbTGBFR6 BbqdSd+s340vYfvoLCJxkRI3cIJ0LPr49fXS9RbLzVr7jHVqKOZbgSN4maUZv238 EPgt55VfZe+5TRVpPEW+vxSTqv2tEFWigM6Mods+9vkqaz0vixHL4WI56g+PQwlI k46Lfa2wo4NvlLanfeETP1bxM9jH1KqMt/eU/iMTOlxL351J0HPy8j/pf2s+5Rto dwcZAAFiZlzZ60vE4jDABfwzCNNYFpxLjrAY95/Uj1k1HZigaWfJ/tPLPQq3EuMl x0PoACbt77cX3nCcSgFxmTdaTMLpstnq86T2QC45mFWmg36sId0= -----END CERTIFICATE-----Generated at Wed Jul 23 02:02:34 2025 by rpki-client